Cyber Security - Manager

About the role

This position involves leading cybersecurity strategy and advisory projects for clients. You will serve as the main point of contact for clients, guiding them through security assessments, risk analysis, and program development. The role requires a blend of technical knowledge and strong communication skills to work with various stakeholders.

Key facts

What you'll do

• Direct the day-to-day execution of cybersecurity strategy and advisory engagements, ensuring projects stay on schedule.
• Act as the primary client liaison, managing expectations and fostering trust with client teams.
• Lead workshops, discovery sessions, and working meetings with client leadership.
• Produce high-quality deliverables such as assessment reports, risk analyses, and program roadmaps.
• Support security maturity assessments, gap analyses, and virtual CISO advisory services.
• Help with scoping discussions and proposal creation under senior leadership guidance.
• Collaborate with the GRC and Security Engineering teams to deliver comprehensive solutions.
• Provide regular updates and reports to clients to maintain alignment.
• Identify opportunities for expanding services within existing client relationships.
• Mentor junior team members by reviewing their work and offering feedback.
• Contribute to internal practice development, including methodologies and templates.
• Stay informed about the latest threat landscape, frameworks, and security tools.
• Participate in recruiting, internal training, and thought leadership initiatives.

Requirements

• Bachelor's degree in Cybersecurity, Computer Information Systems, or a related field.
• Five or more years of experience in cybersecurity consulting, advisory, or a client-facing security role.
• Practical experience delivering security assessments, risk advisory, or program development.
• Familiarity with cybersecurity frameworks like NIST CSF, ISO 27001, HIPAA, SOC 2, and PCI-DSS.
• Excellent written and verbal communication skills, including presenting to senior business and technical leaders.

Nice to have

• Technical understanding of cloud security, identity and access management, security operations, or data protection.
• Relevant certifications such as CISSP, CISM, or CISA.
• Hands-on experience with tools in Cloud Security, DevSecOps, Vulnerability Management, End Point Security, or Log Management.

Skills & tools

• NIST CSF
• ISO 27001
• HIPAA
• SOC 2
• PCI-DSS
• Cloud Security
• Identity and Access Management
• Security Operations
• Data Protection
• DevSecOps
• Vulnerability Management
• End Point Security
• Log Management

Practical notes

This is a remote position within the United States. Full-time roles are eligible for comprehensive benefits including medical, dental, and vision insurance, 401(k) with company match, and paid time off. Artificial intelligence tools are used in the hiring process for screening and assessment, but final decisions are made by humans.